While creating Unbound DNS port for Android I've struggled on `unbound-control-setup` not being able to generate certificates, because openssl request is generated through HEREDOC syntax, which is not supported on Android sh/bash by default
I've created version of this script replacing HEREDOC with multiple echo commands, see here: https://github.com/smarek/android-unbound-dns/blob/master/unbound-control-setup
Would it be possible for you to provide this support (remove HEREDOC) by default?

Hi Wouter,
thank you, that's great :-)
Of course rest of changes are not suitable for rest of Unbound users, but this makes it far more easy to not care about future revisions of this setup script.
Best Regards
Marek Sebera